diff -Nur dde-daemon-3.25.2/misc/polkit-action/com.deepin.daemon.accounts.policy.in dde-daemon-3.25.2-new/misc/polkit-action/com.deepin.daemon.accounts.policy.in
--- dde-daemon-3.25.2/misc/polkit-action/com.deepin.daemon.accounts.policy.in	2019-04-10 11:49:27.000000000 +0800
+++ dde-daemon-3.25.2-new/misc/polkit-action/com.deepin.daemon.accounts.policy.in	2019-04-14 20:40:20.450184100 +0800
@@ -10,7 +10,7 @@
         <description>Change your own user data</description>
         <message>Authentication is required to change your own user data</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_self</allow_active>
         </defaults>
@@ -20,7 +20,7 @@
         <description>Manage user accounts</description>
         <message>Authentication is required to change user data</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_admin_keep</allow_active>
         </defaults>
@@ -30,7 +30,7 @@
         <description>Enable Auto Login</description>
         <message>Authentication is required to enable auto login</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_self</allow_active>
         </defaults>
@@ -40,7 +40,7 @@
         <description>Disable Auto Login</description>
         <message>Authentication is required to disable auto login</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_self</allow_active>
         </defaults>
@@ -50,7 +50,7 @@
         <description>Enable Login without password</description>
         <message>Authentication is required to enable login without password</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_self</allow_active>
         </defaults>
@@ -60,7 +60,7 @@
         <description>Disable Login without password</description>
         <message>Authentication is required to disable login without password</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_self</allow_active>
         </defaults>
@@ -70,7 +70,7 @@
         <description>Set keyboard layout</description>
         <message>Authentication is required to set keyboard layout</message>
         <defaults>
-            <allow_any>no</allow_any>
+            <allow_any>auth_admin</allow_any>
             <allow_inactive>no</allow_inactive>
             <allow_active>auth_self</allow_active>
         </defaults>
diff -Nur dde-daemon-3.25.2/misc/polkit-action/com.deepin.daemon.Grub2.policy.in dde-daemon-3.25.2-new/misc/polkit-action/com.deepin.daemon.Grub2.policy.in
--- dde-daemon-3.25.2/misc/polkit-action/com.deepin.daemon.Grub2.policy.in	2019-04-10 11:49:27.000000000 +0800
+++ dde-daemon-3.25.2-new/misc/polkit-action/com.deepin.daemon.Grub2.policy.in	2019-04-14 20:39:15.084613200 +0800
@@ -10,7 +10,7 @@
     <description>Change the grub2 configuration</description>
     <message>Authentication is required to change the grub2 configuration</message>
     <defaults>
-      <allow_any>no</allow_any>
+      <allow_any>auth_admin</allow_any>
       <allow_inactive>no</allow_inactive>
       <allow_active>auth_admin_keep</allow_active>
     </defaults>
@@ -20,7 +20,7 @@
     <description>Prepare grub2 display resolution detection</description>
     <message>Authentication is required to prepare grub2 display resolution detection</message>
     <defaults>
-      <allow_any>no</allow_any>
+      <allow_any>auth_admin</allow_any>
       <allow_inactive>no</allow_inactive>
       <allow_active>auth_admin_keep</allow_active>
     </defaults>